Legal
Privacy Notice
Effective date: 26 August 2026
Last updated: 26 August 2026
Tap&Ticket is an early-stage software project operated by the individual identified in the applicable agreement. Tap&Ticket is currently being provided to selected businesses as a free pilot.
1. Who we are
Tap&Ticket is an early-stage software project operated by William Thompson. It is currently being provided to selected businesses as a free pilot. Tap&Ticket is not a limited company.
For any privacy question or request, email hello@tapandticket.com.
2. Our roles
Tap&Ticket handles personal data in two ways:
- As data controller — for data about our own website visitors, people who request access, and the business and staff accounts we manage.
- As data processor — for the customer and ticket data that a pilot business enters into the platform. That business is the data controller for its customers' data, and our Data Processing Agreement applies.
3. Information we hold
Depending on how you interact with Tap&Ticket, we may hold:
| Who you are | What we may hold |
|---|---|
| Website visitor | Basic technical information your browser sends, such as the pages you visit and your device and browser type. |
| Person requesting access | Your name, business name, email address, phone number, the plan you are interested in, and anything you tell us in the request form. |
| Business account contact | Your name, email address, phone number, business name and business details. |
| Staff user | Your name, email address, role, and sign-in activity on your business's account. |
| Customer of a pilot business | Your name, phone number or email address (if the business records them), the items you drop off, your ticket reference and collection code, and your job status history. |
| NFC tap | The stand that was tapped, the time, and basic device information sent by the phone's browser. |
4. How we use it and why
| What we use data for | Lawful basis |
|---|---|
| Running the digital ticket service — creating tickets, updating statuses and enabling collection | Performing our agreement with the business; the business's legitimate interests in serving its customers |
| Setting up and managing business and staff accounts | Performing our agreement with the business |
| Responding to access requests and enquiries | Legitimate interests in responding to you; steps towards an agreement |
| Sending product updates you have opted into | Your consent, which you can withdraw at any time |
| Keeping the service secure and preventing misuse | Legitimate interests in running a secure service |
| Meeting legal obligations | Legal obligation |
We do not sell personal data to anyone.
5. Cookies and browser storage
Tap&Ticket uses only the cookies and browser storage needed to run the service — for example, keeping a customer's drop-off linked to their browser and keeping staff signed in. We do not use analytics, advertising or tracking cookies. See our Cookie Notice for details.
6. Who we share it with
We share personal data only with the service providers that help us run Tap&Ticket, and only as needed:
- our managed cloud platform, which hosts the application, database and authentication
- our transactional email provider, which sends account and ticket emails
- Apple, where a customer chooses to add a ticket to Apple Wallet
Our current list is on the Sub-processors and Infrastructure page. We may also disclose data where the law requires it.
7. International transfers
Some of our service providers may process data outside the UK. Where they do, we rely on an approved safeguard, such as UK adequacy regulations or the UK International Data Transfer Agreement or Addendum.
8. How long we keep it
We keep personal data only for as long as it is needed for the pilot and your account, and delete or anonymise it when it is no longer needed. Our Data Retention and Deletion Policy explains this in more detail.
9. Security
We use appropriate technical and organisational measures to protect personal data, and access is limited to those who need it to run the service. No method of transmission or storage is completely secure, but we work to protect your data and will tell you and the regulator where the law requires it if something goes wrong.
10. Your rights
Under UK data protection law, you have the right to:
- access the personal data we hold about you
- have inaccurate data corrected
- have your data deleted, in certain circumstances
- restrict or object to how we use your data
- receive your data in a portable format, in certain circumstances
- withdraw consent at any time, where we rely on consent
To use any of these rights, email hello@tapandticket.com. If your data is held by a business that uses Tap&Ticket, you can also contact that business directly, as it is the data controller.
11. Complaints
If you are unhappy with how we handle your data, please contact us first so we can try to put it right. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk or on 0303 123 1113.
12. Changes to this notice
We may update this notice from time to time. The latest version will always be posted on this page with its effective and last-updated dates.
13. Contact
For any privacy question or request, email hello@tapandticket.com.
Questions about these terms or your data? Contact hello@tapandticket.com.